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Top Stories 

• Officials reported January 21 that nearly 3 million gallons of saltwater generated by oil 
drilling spilled from a Summit Midstream Partners LLC-owned pipeline near Williston, 
North Dakota, January 6, and leaked into Blacktail Creek, Little Muddy Creek, and 
possibly the Missouri River. - Associated Press (See item 1) 

• Standard & Poor’s Rating Services (S&P) agreed to pay more than $77 million to the U.S. 
Securities and Exchange Commission (SEC) and 2 States January 21 to settle charges of 
fraudulent misconduct to mortgage-backed securities. - U.S. Securities and Exchange 
Commission (See item 6) 

• About 500 first responders worked for more than 15 hours to contain a January 21 fire that 
destroyed at least 200 units at the Avalon on the Hudson apartment complex in Edgewater 
and left more than 1,000 residents permanently or temporarily displaced. - WNBC 4 New 
York City (See item 27) 

• Officials in the Amackertown community of Mississippi alerted emergency personnel 
January 21 that the Pearl River County dam was in ‘imminent danger’ of breaking after a 
leak was discovered. - WLOX 13 Biloxi (See item 30) 
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Energy Sector 



1. January 21, Associated Press - (North Dakota) Nearly 3M gallons of brine spill; ND 
oil boom’s largest leak. North Dakota officials reported January 21 that nearly 3 
million gallons of saltwater generated by oil drilling spilled from a Summit Midstream 
Partners LLC-owned pipeline near Williston January 6, and leaked into Blacktail 
Creek, Little Muddy Creek, and possibly the Missouri River. Cleanup and monitoring 
continued while investigators worked to determine the cause of the rupture. 

Source: http://bismarcktribune.com/bakken/nearlv-m-gallons-of-brine-spill-nd-oil- 
boom-s/article 2a3b4732-3ca4-591f-ab2f-dd42da3c72d4.html 

[ Return to top ] 

Chemical Industry Sector 

2. January 22, Tampa Bay Times - (Florida) Two dead after small plane crashes into 
hazardous chemical warehouse. A small plane that departed from a Lakeland 
Regional Airport flight school January 22 crashed into the Key Safety Systems Inflator 
Technical Center facility in Lakeland that is used as a chemical storage warehouse. 
HAZMAT crews and firefighters worked to keep the chemicals wet due to the risk of 
explosion while the fire was allowed to burn until it was deemed safe for firefighters to 
enter. 

Source: http://tbtpics.tampabav.com/news/publicsafety/small-plane-crashes-into- 
lakeland-warehouse/22 14705 

[ Return to top ] 

Nuclear Reactors, Materials, and Waste Sector 

3. January 21, Champaign News-Gazette - (Illinois) Clinton power plant temporarily 
removed from service. The Clinton nuclear power plant was temporality removed 
from service and taken offline January 21 for maintenance work after operators 
discerned elevated water levels in the containment sump that resulted from a pipe or 
valve leak. 

Source: http://www.news-gazette.com/news/local/2015-01-21/clinton-power-plant- 
temporarily-remo ved- service .html 

[ Return to top i 

Critical Manufacturing Sector 

4. January 22, Softpedia - (International) Tesla Model S hacked to start without key. 
Qihoo 360 reported a vulnerability in the Tesla Model S discovered during a 
demonstration at the SyScan security conference in Beijing that could allow an attacker 
to unlock the vehicle, start the engine, and drive away with the vehicle by intercepting 
the communication between the key fob and the car. Tesla officials confirmed the flaw 
and stated that a fix would be released to close the vulnerability. 



- 2 - 



Source: http://news.softpedia.com/news/Tesla-Model-S-Hacked-to-Start-Without-Key- 
470827 .shtml 



For another story, see item 2 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

5. January 22, Forex Magnates - (International) FX options scam charged by US Court 
- $2.16 million penalty and trading ban. Two individuals and a company were 
charged by a federal court in New York January 22 for fraudulently soliciting retail 
clients to trade FX options with misappropriating client funds between 2001 and 2008, 
targeting individuals from around the world including North America and Europe and 
sustaining severe losses of $1.7 million trading in financial derivatives. 

Source: http://forexmagnates.com/fx-options-scam-charged-us-court-2-16-mln-penalty- 
trading-ban/ 

6. January 21, U.S. Securities and Exchange Commission - (New York; Massachusetts) 
SEC announces charges against Standard & Poor’s for fraudulent ratings 
misconduct. Standard & Poor’s Rating Services (S&P) reached a settlement January 
21 with the U.S. Securities and Exchange Commission (SEC) to resolve a series of 
federal securities law violations for fraudulent misconduct in its ratings of commercial 
mortgage-backed securities. The agreement requires S&P to pay more than $58 million 
to the SEC and plus an additional $21 million in penalties to settle parallel cases in 
New York Massachusetts. 

Source: http://www.sec.gOv/news/pressrelease/2015-10.html#.VMEPKkfF-Ps 

7. January 21, Fort Lauderdale Sun Sentinel - (Florida) FBI hunts gun-toting ‘Poncho 
Bandit’ in bank holdup spree. Authorities are searching for a suspect known as the 
“Poncho Bandit” responsible for four bank robberies and one attempted bank robbery 
throughout South Florida from May - December 2014. 

Source: http://www.sun-sentinel.com/local/broward/fl-five-bank-iobs-linked- 
20150121-story.html 

8. January 21, U.S. Securities and Exchange Commission - (Florida) SEC charges 
investment adviser and manager in south Florida-based fraud. The U.S. Securities 
and Exchange Commission (SEC) announced January 21 fraud charges and an assets 
freeze against Elm Tree Investment Advisors LLC, a Florida-based investment 
advisory firm, its manager, and three related funds in a scheme that raised more than 
$17 million from investors since November 2013 and mislead them by using most of 
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the money raised to make Ponzi-like payments. 

Source: http://www.sec.gOv/news/pressrelease/2015-12.html#.VMEaqUfF-Ps 



1 Return to top i 

Transportation Systems Sector 

9. January 22, Uniontown Herald-Standard - (Pennsylvania) Train derails in 
Uniontown. Seven Southwest Pennsylvania Railroad cars carrying sand derailed 
January 22 at the Penn Street crossing in Uniontown, closing roads in the area and 
rerouting traffic while crews worked to remove the train from the crossing. 

Source: http://www.heraldstandard.com/news/hsnewsnow/train-derails-in- 
umontown/article el 3 1 52dl -0179-528 l-9b5b-d92e4d98b097.html 

10. January 22, WAVE 3 Louisville - (Indiana) Driver of cattle truck that overturned 
near Corydon apparently fell asleep, police say. Approximately 13 miles of 
Interstate 64 near Corydon was closed in both directions for several hours January 22 
after a semi-truck driver carrying 88 beef cattle fell asleep in the westbound lanes and 
overturned, killing between 20 and 30 animals while others roamed onto the roadway. 
The remaining live cattle were transferred to another semi-truck while the driver and 
passenger were taken to a local hospital with injuries. 

Source: http://www.wave3.com/storv/27910948/overturned-cattle-truck-closes-i-64- 
near-corydon 

11. January 21, WRAL 5 Raleigh - (North Carolina) 1-95 reopens near Rocky Mount 
after wreck involving ramen noodle truck. Southbound lanes of Interstate 95 near 
Rocky Mount reopened January 21 after being closed for more than 6 hours after a 
semi-truck carrying ramen noodles crashed near North Carolina Highway 4, spilling the 
products all over the roadway. 

Source: http://www.wral.com/i-95-south-closed-north-of-rockv-mount/14374037/ 

12. January 21, My Eastern Shore Maryland - (Maryland) Overturned propane truck 
closes U.S Route 50 in Dorchester County. All lanes of U.S. Route 50 in Dorchester 
County were closed nearly 11 hours January 21 after a semi-truck carrying propane 
overturned. Crews removed the propane from the tank before the semi-truck was 
moved. 

Source: http://www.mveasternshoremd.com/news/dorchester county/article 4ab02b8e- 
9bl4-55db-a9ab-0211f3e9776a.html 

For another story, see item 20 
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Food and Agriculture Sector 

13. January 22, WHAS 11 Louisville - (Kentucky) Taylor Co. man dies in grain bin 
accident. A worker at a Taylor County farm died January 21 when he was buried after 
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he entered a grain bin to unclog blockage and the grain collapsed around him. Crews 
cut the door off the grain bin and removed the man who suffocated inside the bin. 
Source: http://www.whasll.com/storv/news/local/2015/01/21/taylor-co-man-dies-in- 
grain-bin-accident/22 1 4426 1/ 

14. January 21, Orange County Register - (California) Cholula's Bakery, which sold 
tainted Three Kings bread, is set to reopen. Cholula’s Bakery in Santa Ana was 
scheduled to reopen January 21 after the business closed for more than 2 weeks when 
more than 40 people were sickened after eating a bread product that was laced with a 
synthetic drug. Authorities continue to investigate the incident and are working to 
determine how the drug got into the bread. 

Source: http://www.ocregister.com/articles/bread-648709-bakery-valseca.html 

15. January 21, U.S. Department of Agriculture - (National) Florida firm recalls beef, 
chicken and pork products due to misbranding and undeclared allergen. The Food 
Safety and Inspection Service announced January 21 that Holiday Foods issued a recall 
for about 1,819 pounds of beef, chicken, and pork products after a spice supplier 
notified the company that the cumin in a spice mix used to formulate the products may 
have been contaminated with peanuts. The recalled products were produced between 
August 5 and December 8 and sent to wholesale distributors in several States. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/2015/recall-01 8-201 5-release 



16. January 21, U.S. Department of Agriculture - (International) Pennsylvania firm 
recalls pork products imported without benefit of inspection. House of Bricks 
Realty, Inc. recalled about 130 pounds of French pork rillette because they were not 
presented for U.S. Department of Agriculture inspection at the U.S. point of entry 
posing possible health risks. The product was packaged in 3.2-ounce jars and was 
shipped to distributors for further sale to consumers. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/201 5/recall-0 17-20 15-release 



For additional stories, see items 10 and 20 
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Water and Wastewater Systems Sector 

See item 1 
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Healthcare and Public Health Sector 

Nothing to report 

T Return to top i 
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Government Facilities Sector 



17. January 21, Mount Pleasant Daily Tribune - (Texas) Data breach hits MPISD 
employees. The Mount Pleasant Independent School District (MPISD) in Texas 
notified about 915 current and former staff members that their personal information 
may have been accessed between January 18-21 after the Forest Hills School District 
notified MPISD that they experienced a denial of service attack (DoS) when an 
employee clicked on a social media link which provided the names, addresses, and 
Social Security numbers of MPISD staff members. 

Source: http://www.dailvtribune.net/news/data-breach-hits-mpisd- 
employees/article 05 1 ec5d0-a 1 d2- 1 1 e4-b 1 c7-afde4a6d4ed 1 .html 

18. January 21, Baltimore Sun - (Maryland) Baltimore Co. elementary school students 
injured in bus crash. Ten Elmwood Elementary School students were transported to 
an area hospital following an accident involving their school bus and another vehicle in 
Baltimore County January 21. 

Source: http://www.baltimoresun.com/news/maryland/baltimore-countv/bs-md-school- 
bus-crash-20150121-story.html 

19. January 21, USA Today - (National) Senate.gov websites up after 4-hour outage. 

The U.S. Senate Sergeant at Arms reported that the Senate.gov Web site was down for 
approximately 4 hours January 21, affecting the email systems of several U.S. Senators. 
The network outage issue was identified and technicians restored services. 

Source: http://www.usatodav.com/storv/tech/2015/01/21/senate-websites-email- 
down/22 132469/ 

20. January 19, Associated Press - (Oklahoma) Grass fires burn 2,100 acres in Logan 
County, close 1-35. Two wildfires burned a combined 2,100 acres in central Oklahoma 
January 18, prompting temporary evacuations for neighboring residents and the closure 
of Interstate 35 in Logan County for more than an hour, after damaging a house and 
several other buildings. 

Source: http://www.enidnews.com/news/grass-fires-bum-acres-in-logan-county-close- 
i/article 28a5d7 1 2-9fef- 1 1 e4-b582-672d5fb8ac4 1 .html 

For another story, see item 27 
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Emergency Services Sector 

21. January 21, WRTV 6 Indianapolis - (Indiana) ISP trooper’s badge, weapons stolen 
from car. Authorities are searching for a suspect who stole a firearm and police badge 
from an Indiana State Police trooper’s car during a string of vehicle break-ins in 
Columbus, Indiana, January 21. 

Source: http://www.theindychannel.com/news/local-news/isp-troopers-badge-weapon- 
stolen-from-car 



- 6 - 



For another story, see item 26 



[Return to top ] 

Information Technology Sector 

22. January 22, Help Net Security - (International) Angler exploit kit goes after new 
Adobe Flash 0-day flaw. A malware researcher discovered an unconfirmed zero-day 
vulnerability in Adobe Flash Player versions 16.0.0.235 and 16.0.0.257 that was 
found in the popular Angler exploit kit and exposes users of Windows XP, 7, 8 and 
Internet Explorer 6, 7, 8, and 10 to the Bedep trojan that makes the victims’ computer 
perform ad fraud calls. 

Source: http://www.net-security.org/malware news.php?id=2944 

23. January 22, Securityweek - (International) Google fixes 62 security bugs with release 
of Chrome 40. Google announced a release of Chrome 40 for Windows, Mac OS, and 
Linux, closing 62 vulnerabilities, including the disabling of SSL 3.0, a protocol found 
to be vulnerable to POODLE attacks. 

Source: http://www.securitvweek.com/google-fixes-62-securitv-bugs-release-chrome- 
40 

24. January 22, The Register - (International) Remote code execution vulns hit Atlassian 
kit. Atlassian has released updates to patch a serious vulnerability, an Object-Graph 
Navigation Language (OGNL) double evaluation vulnerability found in all versions of 
its Confluence, Bamboo, LishEye, and Crucible products that could allow an attacker to 
execute Java code of their choice on systems that use the affected frameworks as long 
as they can access their Web interfaces. 

Source: http://www.theregister.co.uk/2015/01/22/atlassian vulns/ 

25. January 22, Help Net Security - (International) Click-fraud malware brings 
thousands of dollars to YouTube scammers. Researchers at Symantec reported a 
two-component click-fraud malware dubbed Tubrosa, which could allow an attacker to 
compromise victims’ computers with the malware and use them to artificially inflate 
their YouTube video views and take advantage of the YouTube Partner Program 
validation process. 

Source: http://www.net-security.org/malware news.php?id=2945 
Lor another story, see item 4 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



26. January 22, KMPH 26 Visalia - (California) AT&T land line outage after 

construction crews cut cable. An unknown number of customers in Madera, Fresno, 
and Mariposa counties experienced an AT&T land line phone outage January 21 when 
a contractor inadvertently cut a cable. Emergency 9-1-1 calls were rerouted while crews 
worked to restore service. 

Source: http://www.kmph.com/storv/27910326/att-land-line-outage-after-construction- 
crews-cut-cable 
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Commercial Facilities Sector 

27. January 22, WNBC 4 New York City - (New Jersey) Luxury apartment complex 
inferno contained after more than 15 hours; hundreds displaced. About 500 first 
responders worked for more than 15 hours to contain a January 21 fire that destroyed at 
least 200 units at the Avalon on the Hudson apartment complex in Edgewater and left 
more than 1,000 residents permanently or temporarily displaced. The city’s Mayor 
declared a local state of emergency and closed area schools January 22 due to reduced 
visibility and restricted access to roadways as crews battled the blaze that is under 
investigation. 

Source: http://www.nbcnewyork.com/news/local/New-Jersev-Edgewater-Fire- 
Apartment-Complex-Avalon-on-Hudson-289416441.html 

28. January 21, Associated Press - (Tennessee) Cancellations follow news of norovirus 
at Nashville hotel. A norovirus outbreak at the Gaylord Opryland Resort and 
Convention Center in Nashville sickened more than 350 Astellas Pharma US 
employees and guests that attended a conference at the hotel during the week of 
January 12, prompting the company to cancel the remainder of its meetings. The 
Nashville Metro Public Health Department confirmed three cases of norovirus and is 
investigating to determine the scope of the outbreak. 

Source: http://www.sunherald.com/2015/01/21/6029704 cancellations-follow-news-of- 
norovirus.html 



29. January 21, Reuters - (California) Accelerant found in ruins of massive Los Angeles 
construction fire. Authorities reported January 21 that investigators using surveillance 
videos and an accelerant detection dogs discovered accelerant as evidence of arson 
during a probe into a December 8 fire that caused $30 million in damage at an 
apartment complex under construction in Los Angeles. Officials have interviewed more 
than 100 people about the fire and offered an award for information about the blaze as 
they continue to investigate. 

Source: http://www.reuters.com/article/2015/01/22/us-usa-arson-california- 
idUSKBN0KU2UP201 50122 
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Dams Sector 



30. January 21, WLOX 13 Biloxi - (Mississippi) Officials: Pearl River County dam in 
‘imminent danger’ of breaking. Officials in the Amackertown community alerted 
emergency personnel January 21 that the Pearl River County dam was in ‘imminent 
danger’ of breaking after a leak was discovered. A contractor was called in to create a 
controlled breach on the dam to relieve some of the pressure. 

Source: http://www.wlox.com/storv/27908398/officials-pearl-river-countv-dam-in- 
imminent-danger-of-breaking 



1 Return to top i 



-9 - 




NTAS 

A^viwfT 

NO ACTIVE ALERTS 
www.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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